Job Description

SECURITY CLEARANCE REQUIREMENT: TS, WITH SCI ELIGIBILITY

***POSITION REQUIRES US CITIZENSHIP***

Position Title: Security Control Assessor II (SCA II)

Location: Kirtland AFB, NM

The anticipated salary range for this position is $166,000 - $181,000. Actual compensation will be determined based on the candidate’s qualifications and experience, geographic location, contractual requirements, and other relevant business considerations. The final salary may fall outside the stated range.

Position Description:

The Security Control Assessor (SCA) conducts comprehensive assessments of the management, operational, and technical security controls employed within or inherited by an information system to determine their overall effectiveness, assesses the severity of weaknesses or deficiencies, and recommends corrective actions. Responsibilities cover Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities within the customer’s area of responsibility.

We are seeking an SCA II to carry out the following duties and responsibilities:

• Perform oversight of the development, implementation, and evaluation of IS security program policy, with special emphasis on integrating existing SAP network infrastructure
• Assess information systems using the Risk Management Framework (RMF) in accordance with the Joint SAP Implementation Guide (JSIG)
• Advise the Information System Owner (ISO), Information Data Owner (IDO), Program Security Officer (PSO), and Delegated/Authorizing Official (DAO/AO) on assessment and authorization issues
• Evaluate authorization packages and recommend authorization decisions to the AO/DAO
• Evaluate IS threats and vulnerabilities to determine whether additional safeguards are required
• Advise the Government on Confidentiality, Integrity, and Availability impact levels
• Complete and document security assessments and prepare the Security Assessment Report (SAR) for each authorization boundary
• Initiate a Plan of Action and Milestones (POA&M) for weaknesses identified in the SAR
• Assess proposed changes to authorization boundaries, operating environments, and mission needs to determine continued authorization to operate
• Review and concur with sanitization and clearing procedures, and assist with Government compliance inspections and cybersecurity incidents
• Evaluate hardware and software for security impact and evaluate Continuous Monitoring Plans
• Apply working knowledge of systems at Protection Levels 3 and 4 (PL3/PL4) and of Cross-Domain Solutions (CDS), including joint CDS assessments with other DoD agencies

Qualifications:

Required:

• 9-11 years of related experience: Bachelor’s degree in a related discipline and 7 years, Associate’s degree and 9 years, or no degree and 11 years
• 4+ years of SAP, SCI, or Collateral information system security experience
• Prior performance as an ISSO, ISSM, or SCA
• DoD 8570 IAM Level II certification (e.g., CISSP, CASP+, CISM)
• Expert knowledge of DoD, national, and service/agency security policy, manuals, and standards
• Able to regularly lift up to 50 lbs
• 10%-25% Travel

Security Clearance:

• TS with SCI eligibility
• Eligibility for access to Special Access Program (SAP) Information
• Willingness to submit to a Counterintelligence polygraph

Military Experience Welcome (MOS / AFSC / Rating):

• Enlisted: Army 25D, 17C, 25B; Air Force 1D7X1 (formerly 3D0X2), 1B4X1; Navy Cryptologic Technician Networks (CTN), Information Systems Technician (IT); Marine Corps 1721, 0689
• Officer and Warrant Officer: Army 17A, 25A, 26B, 170A, 255S; Air Force 17D, 17S; Navy 1820, 1840; Marine Corps 1702, 0602
• Civilian equivalent: GS-2210 Information Technology Specialist (INFOSEC)

Employee Benefits:

• Competitive salary for well-qualified applicants
• 401(k) plan
• Annual performance bonus
• Certification and advanced degree attainment bonuses
• Student Loan / Tuition reimbursement
• Health Care Insurance (medical, dental, vision)
• Up to four weeks of paid vacation
• 11 Federal Holidays, and 3 Floating Holidays
• Team bonding events

RedTrace Technologies is an EOE employer